CVE-2024-46987

CVE-2024-46987 - Camaleon CMS 本地文件包含 Camaleon CMS 的已验证本地文件包含（LFI）利用工具。 漏洞 Camaleon CMS 容易受到通过 /admin/media/downloadprivatefile 端点进行的已验证 LFI 攻击。file 参数未正确清理，允许路径遍历，从而读取服务器上的任意文件。 受影响版本 Camaleon CMS 2.8.2 环境要求 root@kitploit: pip install requests 使用方法 root@kitploit: Print file to terminal default...

CVE-2020-11651

CVE-2020-11651 CVE-2020-11651 के लिए PoC Python3 की आवश्यकता है, 3.8 पर परीक्षण किया गया python3.8 -m pip install pyzmq msgpack root@kitploit: ⇒ python3.8 poc.py -h usage: poc.py -h -p PORT -c CMD -k -m -r READ -w WRITE -f FILE server server ... Exploit CVE-2020-11651 positional arguments: server...

es_inject

CVE-2014-3120 Ejecución Remota de Código en Elastic Search Este proyecto demuestra la vulnerabilidad/malconfiguración CVE-2014-3120. Permite leer y añadir contenido a archivos en el sistema que aloja ES, siempre que el usuario que ejecuta ES tenga acceso a ellos. Notas Esto no requiere un servido...

CVE-2026-56718

CVE-2026-56718 Traversal de ruta no autenticado en jdbhttpd/0.1.0 firmware AJCloud AJY IPC que permite la lectura remota de archivos arbitrarios como root, incluidas las credenciales RTSP en texto claro. CWE: CWE-22 Limitación inadecuada de un nombre de ruta a un directorio restringido Severidad:...

CVE-2020-25540

CVE-2020-25540 ThinkAdmin CVE-2020-25540 poc Since the directory traversal vulnerability is too limited, only the file reading function has been implemented. Please go easy on the criticism, and I appreciate your guidance. The logic is based on the PHP source code; the key is the encryption metho...

tplmap

Tplmap This project is no longer maintained. I'm happy to merge new PRs as long they don't break the test suite. Tplmap assists the exploitation of Code Injection and Server-Side Template Injection vulnerabilities with a number of sandbox escape techniques to get access to the underlying operatin...

CVE-2026-37070

CVE-2026-37070 位于 Veno File Manager Project 4.4.9 中的 /vfm-admin/ajax/streamvid.php 存在不正确的访问控制，允许已认证的攻击者通过向受影响端点发送特制的 GET 请求，在知道路径和文件名的情况下读取其他用户上传的任何文件。 https://github.com/user-attachments/assets/f5d44ead-af30-4c88-8e90-ad1e1e4913b5...

poc-CVE-2024-23897

poc-CVE-2024-23897 CVE-2024-23897: Lectura Arbitraria de Archivos en Jenkins que lleva a RCE 🎯 Productos y Versiones Afectados root@kitploit: Producto: Jenkins Servidor de Integración Continua/Entrega Continua Versiones: Jenkins 2.441 y anteriores, Jenkins LTS 2.426.2 y anteriores Corregido en:...

CVE-2021-41773-POC

CVE-2021-41773 漏洞复现报告 漏洞概述 CVE ID : CVE-2021-41773 漏洞名称 : Apache HTTP Server 路径遍历漏洞 风险等级 : 高危 CVSS 7.5 影响版本 : Apache HTTP Server 2.4.49 漏洞描述 : Apache HTTP Server 2.4.49 版本存在路径规范化函数 apnormalizepath 的实现缺陷，攻击者可通过构造含有 %2e 编码的特殊请求绕过访问控制，读取 Web 服务器上的任意文件。 环境搭建 操作系统 : Ubuntu 20.04 虚拟机 Web服务器 : Apache...

tomcatfileread

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — python3 CVE-2020-1938 CNVD-2020-10487 Explotación de lectura / inclusión de archivos del protocolo AJP de Tomcat — versión convertida a python3 del POC. Autor original python2: ydhcui — https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-l...

WordPress WP File Download plugin <= 6.3.8 - Authenticated (Subscriber+) Arbitrary File Read via Path Traversal in 'remoteurl' Parameter vulnerability

Authenticated Subscriber+ Arbitrary File Read via Path Traversal in 'remoteurl' Parameter vulnerability discovered by 0xd4rk5id3 - EnvoraSec in WordPress Plugin WP File Download versions = 6.3.8...

EUVD-2026-60970

CodeWhale: Argument Injection in gitblame Tool Allows Arbitrary File Read Without Approval...

EUVD-2026-60966

CodeWhale: Project config instructions override enables arbitrary file read into AI system prompt via cloned repository...

CVE-2024-23897

CVE-2024-23897 — HTTPS + CSRF-crumb aware PoC cve-2024-23897-crumb.py — unauthenticated arbitrary file read against Jenkins = 2.441 / LTS = 2.426.2 fixed in 2.442 / LTS 2.426.3. What this adds over the public PoCs The widely-used PoCs — exploit-db 51993, xaitax/CVE-2024-23897, and the...

CVE-2026-23751-poc

CVE-2026-23751-PoC Proof-of-concept implementation of the .NET HTTP Remoting technique described in Code White's NewRemotingTricks, targeting Tungsten Automation Kofax Capture. CVE-2026-23751 Title: Tungsten Automation Kofax Capture Unauthenticated File Read/Write and Command Execution via .NET...

CyBroHttpServer-v1.0.3-Directory-Traversal

CyBroHttpServer-v1.0.3-目录遍历 CyBroHttpServer v1.0.3 中的目录遍历漏洞允许攻击者读取敏感信息。 CVE-2018-16133 https://vulners.com/cve/CVE-2018-16133 PoC 要利用此漏洞，攻击者可以使用 'http://host/../../../../../../../../' 请求从目标获取一些信息。 例如：http://host/../../../../../../../../Windows/win.ini' root@kitploit: GET...

CVE-2025-10952-ml-logger-AFR

CVE-2025-10952 — Lectura arbitraria de archivos en streamhandler de ml-logger Este repositorio proporciona un script Python independiente — CVE-2025-10952.py — que explota una vulnerabilidad de lectura arbitraria de archivos sin autenticación en streamhandler de ml-logger, encadenada con el...

cgiemail-exploit

Cgiemail - 源代码泄露/本地文件包含漏洞利用 cgiecho 是 cgiemail 附带的一个脚本，如果文件包含方括号且括号内的文本可被猜解，它将返回网站文档根目录下的任意文件。 cgiemail 目前随 cPanel 一起提供，默认启用。 示例 对于页面： root@kitploit: Success Processed form looks like this: ?php // http://hostname/login.php if$GET == 'admin' && $GET'pass' == 'thisissecure' /../ cgiemail 1.6...

EUVD-2026-71491

IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2026-14470

IBM Langflow OSS versions 1.0.0 through 1.10.2 is vulnerable to a path traversal flaw (CWE-22) in its file and knowledge base components. An authenticated attacker can send a crafted URL request containing ../ sequences to read arbitrary files on the system. Per the IBM security bulletin, in the ...